Monitoring method

ABSTRACT

Disclosed are a monitoring method and a system that display a log icon including event-related information to facilitate an intuitive confirmation of event information. The monitoring method includes: receiving a plurality of images from a plurality of image devices; displaying the images in a first region of a display; displaying information about the image devices related to the images, which are being displayed in the first region, in a second region of the display which is different from the first region; and generating a plurality of log icons including event information when a predetermined event is detected from the images which are being displayed in the first region; and displaying the log icons in a third region of the display which is different from the first and second regions.

CROSS-REFERENCE TO THE RELATED APPLICATION

This application claims priority from Korean Patent Application No.10-2013-0122217, filed on Oct. 14, 2013, in the Korean IntellectualProperty Office, the disclosure of which is incorporated herein in itsentirety by reference.

BACKGROUND

1. Field

Methods and apparatuses consistent with exemplary embodiments relate toa monitoring method, and more particularly, to a monitoring method thatdisplays a log icon including event-related information.

2. Description of the Related Art

A monitoring system monitors a specific place by using a plurality ofmonitoring units, and when an abnormal situation is identified, themonitoring system enables an action against the abnormal situation orrecognition after the abnormal situation. The monitoring system isactively applied to buildings, industrial sites, places for selling orstoring things, places for handling expensive goods, multipleapartments, private houses, etc.

The monitoring system performs a monitoring function in interoperationwith an application called a central monitoring system (CMS). The CMSdisplays images respectively captured by a plurality of monitoringunits, and when a specific event is detected from the imagesrespectively captured by the plurality of monitoring units, the CMSdisplays the specific event as text log information, thereby enabling amanager to recognize the specific event.

However, when an event is detected from images which are respectivelycaptured by a plurality of monitoring units and displayed, it isdifficult to obtain information about the event at a glance by usingtext log information, and the moment of the occurrence of the event canbe missed. That is, security efficiency is changed depending on apersonal competence of a manager, and it is difficult to immediatelydetermine a condition.

SUMMARY

Exemplary embodiments of the inventive concept provide a monitoringmethod and a system that display a log icon including event-relatedinformation to facilitate the intuitive confirmation of eventinformation.

Various exemplary embodiments will be set forth in part in thedescription which follows and, in part, will be apparent from thedescription, or may be learned by practice of the presented embodiments.

According to an aspect of an exemplary embodiment, there is provided amonitoring method which may include: receiving a plurality of imagesfrom a plurality of image devices; displaying the images in a firstregion of a display; displaying information about the image devicesrelated to the images, which are being displayed in the first region, ina second region of the display which is different from the first region;and generating a plurality of log icons including event information whena predetermined event is detected from the images which are beingdisplayed in the first region; and displaying the log icons in a thirdregion of the display which is different from the first and secondregions.

Each of the log icons may include a thumbnail image at a time when theevent occurs, a type of the event, and text information about the event.

The monitoring method may further include: displaying at least onesearch tab, in which a search condition is set, near the third region;and in response to selection of a search tab among the at least onesearch tab, displaying at least one log icon corresponding to the searchcondition which is set in the selected search tab.

The monitoring method may further include: displaying a timeline in thedisplay; and in response to selection of a time section from thetimeline, displaying at least one log icon corresponding to the selectedtime section.

The monitoring method may further include, in response to selection of alog icon, from among the at least one log icon, corresponding to theselected time section, activating the selected log icon, anddeactivating the rest of the at least one log icon.

The monitoring method may further include, in response to selection of alog icon, from among the at least one log icon, corresponding to theselected time section, activating the selected log icon, anddeactivating the rest of the at least one log icon.

According to an aspect of another exemplary embodiment, there isprovided a monitoring method which may include: detecting occurrence ofat least one event from a plurality of images received from a pluralityof image devices; generating, from the images, a thumbnail image and anevent image corresponding to a time of the occurrence of each of theevent; generating a log icon which includes the thumbnail image andevent information corresponding to each of the event; and displaying alog list including the log icon corresponding to each of the event in aregion of a display in real time.

The event information may include a type of the event and textinformation about the event.

The monitoring method may further include, in response to selection of alog icon from among a plurality of log icons in the log list, activatingan event image matching a thumbnail image of the selected log icon, anddeactivating unselected log icons.

The monitoring method may further include: displaying a condition searchtab in the display; in response to selection of the condition searchtab, displaying a menu which includes at least one search condition tobe selected; and in response to selection of one of the at least onesearch condition, displaying a log list including at least one log iconcorresponding to the selected search condition, wherein the at least onelog icon includes a thumbnail image and information about an event.

The search condition may include at least one of a place of the event, atype of the event, and a plurality of devices providing the plurality ofimages corresponding to respective events.

The monitoring method may further include: displaying a timeline in thedisplay; and in response to selection of a time section from thetimeline, displaying at least one log icon corresponding to the selectedtime section.

The monitoring method may further include, in response to selection of alog icon from among the at least one log icon corresponding to theselected time section, activating an event image matching a thumbnailimage of the selected log icon about an event, and deactivating the restof the at least one log icon.

The monitoring method may further include, if a number of the at leastone log icon corresponding to the selected time section is more than amaximum number of log icons that can be displayed in the display,indicating a number of log icons that exceeds the maximum number in thedisplay.

According to an aspect of an exemplary embodiment, a monitoring systemmay include: a controller configured to detect occurrence of at leastone event from a plurality of images, generate, from the plurality ofimages, a thumbnail image and an event image at a time of the eventoccurrence, and generate a log icon which includes the thumbnail imageand information about the event; and a display configured to display alog list including a plurality of log icons including the log icon inreal time.

The event information may include a type of the event and textinformation about the event.

In response to selection of a log icon from among the plurality of logicons, the controller activates an event image matching a thumbnailimage of the selected log icon and deactivates the rest of the log iconsin the display.

The display unit may display a condition search tab. In response toselection of the condition search tab, the controller may control thedisplay to display a menu which includes at least one search conditionto be selected. In response to selection of one of the at least onesearch condition, the controller may control the display to display alog list including at least one log icon corresponding to the selectedsearch condition.

The display unit may display a timeline. In response to selection of atime section from the timeline, the controller may control the displayto display at least one log icon corresponding to the selected timesection.

If a number of the at least one log icon corresponding to the selectedtime section is more than a maximum number of log icons that can beaccommodated in the display, the control unit indicates a number of logicons that exceeds the maximum number in the display.

BRIEF DESCRIPTION OF THE DRAWINGS

These and/or other aspects will become apparent and more readilyappreciated from the following description of the exemplary embodiments,taken in conjunction with the accompanying drawings, in which:

FIG. 1 is a diagram illustrating a configuration of a monitoring systemaccording to an exemplary embodiment;

FIG. 2 is a diagram illustrating an interface screen of a centralmanagement system of FIG. 1 according to an exemplary embodiment;

FIGS. 3A-3B illustrate diagrams for describing display of a log iconbased on selection of a search tab in the interface screen of FIG. 2,according to an exemplary embodiment;

FIGS. 4A-4B illustrate diagrams for describing display of a log iconbased on selection of a time section in the interface screen of FIG. 2,according to an exemplary embodiment;

FIG. 5 is a flowchart illustrating a monitoring method according to anexemplary embodiment;

FIG. 6 is a flowchart illustrating a display method for monitoringaccording to an exemplary embodiment;

FIG. 7 is a flowchart illustrating a method of displaying a log iconbased on selection of a search tab, according to an exemplaryembodiment; and

FIG. 8 is a flowchart illustrating a method of displaying a log iconbased on selection of a time section, according to an exemplaryembodiment.

DETAILED DESCRIPTION OF THE EXEMPLARY EMBODIMENTS

Reference will now be made in detail to exemplary embodiments which areillustrated in the accompanying drawings, wherein like referencenumerals refer to like elements throughout. In this regard, theexemplary embodiments may have different forms and should not beconstrued as being limited to the descriptions set forth herein.Accordingly, the exemplary embodiments are merely described below, byreferring to the figures, to explain various aspects of the inventiveconcept.

Since the inventive concept may have diverse modified embodiments,selected embodiments are described herebelow in reference to thedrawings. However, this does not limit the inventive concept withinthese embodiments and it should be understood that the inventive conceptcovers all the modifications, equivalents, and replacements within theidea and technical scope of the inventive concept. Moreover, detaileddescriptions related to well-known functions or configurations will beomitted in order not to unnecessarily obscure subject matters of theembodiments.

It will be understood that although the terms of first and second areused herein to describe various elements, these elements should not belimited by these terms. Terms are only used to distinguish one componentfrom other components.

In the following description, the technical terms are used only forexplain a specific exemplary embodiment while not limiting the inventiveconcept. The terms of a singular form may include plural forms unlessreferred to the contrary. The meaning of ‘comprise’, ‘include’, or‘have’ specifies a property, a region, a fixed number, a step, aprocess, an element and/or a component but does not exclude otherproperties, regions, fixed numbers, steps, processes, elements and/orcomponents.

The inventive concept may be embodied as functional blocks and variousprocessing operations. The functional blocks may be implemented withvarious hardware and/or software configurations executing specificfunctions. For example, the exemplary embodiment employ integratedcircuit configurations such as a memory, processing, logic, a look-uptable and the like capable of executing various functions upon controlof microprocessors or other control devices. In a similar manner to thatin which the elements of the exemplary embodiment may be executed withsoftware programming or software elements, the inventive concept may beimplemented with a scripting language or a programming language such asC, C++, Java, assembler, and the like, including various algorithmsimplemented by a combination of data structures, processes, processes,routines or other programming configurations. The functional aspects maybe implemented by algorithms executed in one or more processors. Also,the exemplary embodiments may employ conversional arts to establish anelectronic environment, process signals and/or process data. The terms“mechanism”, “element”, “means” and “configuration” may be widely usedand are not limited to mechanical and physical configurations. Suchterms may have the meaning of a series of routines of software inassociation with a processor or the like.

Hereinafter, exemplary embodiments of the inventive concept will bedescribed in detail with reference to the accompanying drawings. Likereference numerals in the drawings denote like elements, and thus theirdescriptions will not be repeated.

FIG. 1 is a diagram illustrating a configuration of a monitoring systemaccording to an exemplary embodiment.

Referring to FIG. 1, the monitoring system includes image devices 100associated with capturing of one or more images, a network 200, andcentral management equipment 300 which includes a controller 310 and adisplay 320. In the present embodiment, the device 100 is connected tothe central management equipment 300 over the network 200.

The image devices 100 may include at least one first network camera 110that captures an image, at least one second network camera 120 thatcaptures an image, a digital video recorder (DVR) 130 that stores animage captured by the second network camera 120, at least one thirdnetwork camera 140 that captures an image, a network video recorder(NVR) 150 that stores an image captured by the third network camera 140,at least one analog camera 160 that captures an image, and an encoder170 that encodes an image captured by the analog camera 160. Here, thedevice 100 is not limited to the above-described details, and mayinclude any devices that are connected to the network 200 and transmitan image to the central management equipment 300.

The image devices 100 may transmit images captured by the first networkcamera 110, images stored in the DVR 130, images stored in the NVR 150,and encoded images output from the encoder 170, to the centralmanagement equipment 300 over the network 200.

The central management equipment 300 displays images which are receivedfrom the image devices 100 over the network 200, and when an event isdetected from the displayed images, the central management equipment 300displays log icons including information about the event. The controller310 controls an operation of the central management equipment 300, anddisplays control details in the display 320.

According to an exemplary embodiment, the controller 310 may sense(detect) occurrence of an event from the images which are received fromthe image devices 100 over the network 200, or receive images, includingan image in which an event is detected, from the image devices 100. Inorder for the controller 310 to detect an event, the controller 310 mayinclude an image analyzer (not shown). The controller 310 analyzes animage received from the image devices 100, and when a predeterminedevent condition is satisfied, the controller 310 recognizes occurrenceof an event. Here, when the event condition is satisfied through imageanalysis such as disappearance or appearance of an object in a screen, atrace of an image of a target similar to a specific image preset by auser, sensing of a movement of an object, and a turn-off of an image,the controller 310 recognizes occurrence of an event. Furthermore, thecontroller 310 analyzes a sound source included in an image signal, andwhen an event condition with respect to a sound source is satisfied, thecontroller 310 recognizes occurrence of an event. Here, when a level ofthe sound source is equal to or higher than a threshold valuepredetermined by a user or the sound source is the same as a soundsource preset by a user, the controller 310 recognizes occurrence of anevent. Furthermore, a database of several abnormal sound sources isbuilt. The controller 310 compares the analyzed sound source with thesound sources stored in the database (not shown), and when there is amatch therebetween, the controller 310 may recognize occurrence of anevent. In an image, the event condition used to analyze the image mayinclude a case where an object appears, a case where an image (forexample, appearance of a face unable to recognize) preset by a user isgenerated, a case where a screen color is changed, and a case where amotion occurs in a predetermined region, and may be preset. An eventcondition used to analyze a sound source may include a case where anabnormal sound source (stridulation (skid) of a car tire, a sound ofbreaking glass, an alarm sound, a collision sound, etc.) occurs, a casewhere a sound source (for example, a scream of a human, crying of ababy, etc.) preset by a user, and a case where a voice equal to orgreater than a threshold value occurs, and may be preset.

The controller 310 divides the display unit 320 into three regions, anddisplays different information in the three regions. FIG. 2 is a diagramillustrating an interface screen of the central management equipment 300displayed by the display 320 according to an exemplary embodiment.

The controller 310 displays images, received from at least one the imagedevices 100, in a first region 210 of the display 320. In FIG. 2, thefirst region 210 of the display 320 simultaneously displays, in realtime, images received twelve image devices 100 through twelve channels,but the present embodiment is not limited thereto. For example, only animage through one channel may be displayed on an entire screen of thedisplay 320, or a number of images through four channels, fifty-fourchannels, etc. may be displayed on the entire screen. Also, thecontroller 310 displays information (type, presence of connection, etc.)about the image devices 100 related to the displayed images, in a secondregion 220 of the display 320 which is different from the first region210. For example, the second region 220 displays information about thefirst network camera 110, the DVR 130, the NVR 150, and the encoder 170related to the images which are being currently displayed.

Furthermore, when an event occurs and detected from images which arebeing displayed in the first region 210, the controller 310 displays alog list, which includes a plurality of log icons 231 includinginformation about the event, in a third region 230 of the display 320which is different from the first and second regions 210 and 220. Whenan event occurs and detected from an image, the controller 310 maygenerate a thumbnail image and an event image at a time when the eventoccurs and is detected from the original image. The thumbnail image is asmall-size still image which is generated by down-sampling an image atthe time when the event is generated. The event image is an image for acertain time (for example, 5 seconds before and after) before and afterthe time when the event occurs. The controller 310 may match thethumbnail image with the event image, and store the matched thumbnailimage and event image in a storage device such as a memory (not shown).

Here, each of the log icons 231 includes a thumbnail image at a timewhen an event occurs, the type of the event, and text information (anevent occurrence position, an event occurrence time, and a type ofdevice) about the event. To provide a description with the log icon 231(displayed in the third region 230) as an example, the log icon 231includes a thumbnail image 2311 at a time when the event occurs, a type2312 of the event indicating sensing of a motion, and text information2313 about the event.

According to an exemplary embodiment, the third region 230 displays alog list in which a plurality of log icons are listed in one row. When aplurality of events simultaneously occur in a plurality of channels, thecontroller 310 may generate and display a plurality of log icons on onerow in a predetermined order. When a log icon among the plurality of logicons is selected (clicked), an event image matched with a thumbnailimage of the selected log icon may be activated and displayed in areproducible state (e.g., FIG. 4A). The matched event image, e.g., amoving image, may be displayed in the third region 230 while theplurality of log icons are deactivated.

Examples of an event may include a sensor event generated from a signalsensed by a sensor (not shown) included in the image devices 100, anaudio event generated from an arbitrary sound source, and a motionsensing event. The type of an event may be indicated as a certain symbol(for example, a speaker indicating the audio event, a human shapeindicating the motion sensing event, or the like). As described above,event information is intuitively confirmed by displaying a log iconwhich includes a thumbnail image at a time when an event occurs, thetype of the event, and text information about the event.

In the third region 230, a timeline 233 may be provided at an upper endof a log list, and at least one search tab 232 may be provided at alower end of the log list.

FIGS. 3A and 3B illustrate diagrams for describing display of log iconsbased on selection of a search tab in the third region 230 of theinterface screen of the central management equipment 300 displayed inthe display 320.

Referring to FIG. 3A, the controller 310 may display, at a lower end ofa log list, a real-time event tab 232, which is a default search tab,and a condition search tab 235 illustrated as “+”. When the conditionsearch tab 235 is selected (clicked) by a mouse pointing or a fingertouch (in case of a touch screen), the controller 310 may provide a menuMW for selecting at least one of search conditions. The searchconditions may include a place, the type of an event, and a plurality ofdevices. For example, the controller 310 may hierarchize searchconditions such as devices by floor in a building, devices by position(for example, a gate, stair, etc.) in the building, and the type of anevent, and provide the hierarchized search conditions as the menu MW. Auser may select at least one search condition from the menu MW. Forexample, the manager may select a camera 02 installed in a building gatefrom among the first network cameras 110, and allow only an event, whichoccurs in an image captured by the camera 02, to be displayed in the loglist. The search conditions are not limited to the above-describedexample, and may be variously set.

FIG. 3B illustrates an example in which a plurality of search tabs 232generated by the controller 310 are sequentially displayed. When one ofthe plurality of search tabs 232 is selected, the controller 310displays, in the log list, at least one log icon corresponding to asearch condition which is set in the selected search tab. For example,when a “real-time event” tab is selected from the search tabs 232, thecontroller 310 displays, in real time, the log icons 231 for images fromthe image devices 100 which is connected to the central managementequipment 300 over the network 200. Also, when a “camera 02” tab isselected from the search tabs 232, the controller 310 displays at leastone log icon 231 for at least one image captured by the camera 02 amongthe first network cameras 110. Also, when a “DVR” tab is selected fromthe search tabs 232, the controller 310 displays at least one log icon231 for at least one image transmitted from the DVR 130.

That is, according to the present exemplary embodiment, one or more thesearch tabs 232 may be generated by the condition search tab 235, andthus a search condition may be previously set, and the log icons 231corresponding to the search condition may be conveniently, quicklysorted and displayed. The search tabs 232 may be removed.

FIGS. 4A and 4B illustrate diagrams for describing display of log iconsbased on selection of a time section in the third region 230 of theinterface screen of the central management equipment 300 displayed inthe display 320.

Referring to FIG. 4A, the controller 310 may display a timeline 233 atan upper end of a region in which a log list is displayed. When an eventoccurs, the controller 310 may display, as a line, occurrence of anevent at a position corresponding to a time when the event occurs, inthe timeline 233. When a plurality of events simultaneously occur, eventdisplay lines may overlap each other. In this case, event display linesare displayed to overlap one another in correspondence with the numberof simultaneously occurred events, and thus, a color concentration of adisplay line is changed depending on the number of simultaneouslyoccurred events. For example, when one-time event occurs at a specifictime, a display line may be displayed at a concentration of 10% at aposition corresponding to the specific time, and when a plurality ofevents occur at a specific time, a display line may be displayed at aconcentration of 70% at a position corresponding to the specific time.When an event continuously occurs during a certain time section, adisplay line may be continued and localized, and thus, a display linehaving a certain width may be displayed.

When one time section is selected from the timeline 233 by a user, thecontroller 310 displays, as a log list, at least one log icon 231corresponding to the selected time section in the third region 230. Thecontroller 310 may generate a delimiter A, and provide the delimiter Ato an upper end of each of a rightmost log icon and a leftmost log iconamong the displayed log icons 231. In the embodiment of FIG. 4A, thedelimiter A may be illustrated as “^(┌)”, but the present embodiment isnot limited thereto. For example, various signs for distinguishing timesections may be used. Here, a time section may be selected throughdragging an input device (for example, a mouse device) on the timeline233, or may be directly input.

When a specific log icon 231 is selected from among the displayed logicons 231, the controller 310 activates the selected log icon 231, anddeactivates the other unselected log icons 231. The controller 310 mayalso activate an event image matching a thumbnail image of the selectedlog icon 231, and display the activated event image in a reproduciblestate, in the third region 230.

Referring to FIG. 4B, when the number of log icons within a selectedtime section is more than the number of log icons that can be displayedin the third region 230, the exceeding number of the log icons 231 maybe separately displayed. “+5” 234 illustrated at a right end of the loglist in FIG. 4B denotes that there are five log icons in addition to thelog icons 231 within the selected time section. When the controller 310receives a corresponding number input signal or receives an arrow keyinput signal, the controller 310 may display the other five log icons231 on a next screen, or may remove some of currently displayed logicons 231 from a current screen, and then display the other five logicons 231 on the current screen. According to the exemplary embodimentof FIG. 4B, since the number of log icons exceeds the number of the logicons displayable within the selected time section, the delimiter A isnot illustrated on a rightmost log icon, but when the other five logicons 231 are displayed, the delimiter A may be provided on a lastrightmost log icon.

FIG. 5 is a flowchart illustrating a monitoring method according to anexemplary embodiment. The monitoring method according to thisembodiment, as illustrated in FIG. 1, may be performed in the centralmanagement equipment 300 with the help of peripheral elements. In thefollowing description, the same details as those of FIGS. 1 to 4 are notdescribed.

Referring to FIG. 5, in operation S501, the controller 310 of thecentral management equipment 300 may sense (detect) the occurrence of anevent for multi-channel images input from a plurality of channels. Inoperation S503, when the occurrence of the event is detected from themulti-channel images, the controller 310 may generate a thumbnail imageand an event image at a time when the event occurs. In operation S505,the controller 310 may generate a log icon which includes the thumbnailimage and the event information.

In operation S507, the controller 310 may display the generated log iconin the display 320 in real time, and thus display a log list including aplurality of log icons in the display 320 in real time. The log list islog information in which a plurality of log lists generated for themulti-channel images are listed in one row according to a predeterminedarrangement condition (for example, a time order, a device order, etc.).

When a log icon is selected from among the plurality of log icons, thecontroller 310 may activate an event image matching a thumbnail image ofthe selected log icon, display the activated event image in areproducible state, and deactivate unselected log icons.

FIG. 6 is a flowchart illustrating a display method for monitoringaccording to an exemplary embodiment. In the following description, thesame details as those of FIGS. 1 to 5 are not described.

Referring to FIG. 6, in operation S510, the controller 310 may displayimages, received from the image devices 100, in a first region of thedisplay 320.

Moreover, in operation S520, the controller 310 may display information(type, the presence of connection, etc.) about the image devices 100 fordisplayed images, in a second region of the display which is differentfrom the first region.

Furthermore, when an event occurs and detected from images which arebeing displayed in the first region, the controller 310 may display logicons, including information about the event, in a third region of thedisplay 320 which is different from the first and second regions inoperation S530. Here, a log icon includes a thumbnail image at a timewhen an event occurs, the type of an event, and text information (anevent occurrence position, an event occurrence time, and the type of adevice) about the event. As described above, event information isintuitively confirmed by displaying a log icon which includes athumbnail image at a time when an event occurs, the type of the event,and text information about the event.

FIG. 7 is a flowchart illustrating a method of displaying a log iconbased on selection of a search tab, according to an exemplaryembodiment. Referring to FIG. 7, in operation S531, the controller 310of the central management equipment 300 may display at least one searchtab at a lower end of the third region.

When a tab among a plurality of tabs is selected, the controller 310 maydisplay at least one log icon corresponding to a search condition whichis set in the selected search tab, in operation S532. For example, inFIG. 3, when a “real-time event” tab is selected, the controller 310 maydisplay, in real time, at least one log icon for at least one image fromthe devices 100. When a “DVR” tab is selected, the controller 310 maydisplay at least one log icon for at least one image transmitted fromthe DVR 130.

FIG. 8 is a flowchart illustrating a method of displaying a log iconbased on selection of a time section, according to an exemplaryembodiment. Referring to FIG. 8, in operation S533, the controller 310of the central management equipment 300 may display a timeline at anupper end the third region.

When a time section is selected from the timeline by a user, thecontroller 310 may display, in the third region, at least one log iconcorresponding to the selected time section in operation S534. At thistime, the controller 310 may generate a delimiter, and provide thedelimiter to an upper end of each of a rightmost log icon and a leftmostlog icon among the displayed log icons. When a log icon is selected fromamong the plurality of log icons corresponding to the selected timesection, the controller 310 may activate and display an event imagematching a thumbnail image of the selected log icon, and deactivate anddisplay unselected log icons. Here, a time section may be selected bydragging an input device on the timeline (for example, a mouse device),or may be directly input.

When the number of the log icons corresponding to the selected timesection is more than the maximum number of log icons that can beaccommodated in the third region, the controller 310 may separatelydisplay the exceeding number of the log icons, in operation S535.Referring to FIG. 4B, “+5” illustrated at the right end of the log listdenotes that there are five log icons in addition to the log iconsdisplayed, corresponding to the selected time section. When thecontroller 310 receives a corresponding number input signal or receivesan arrow key input signal, the controller 310 may display the other fivelog icons 231 on a screen.

As described above, according to the above exemplary embodiments, eventinformation is intuitively confirmed by displaying log icon informationincluding even-related information, thereby enhancing securityefficiency.

The above exemplary embodiments may also be embodied as computerreadable codes on a computer readable recording medium. The computerreadable recording medium is any data storage device that may store datawhich may be thereafter read by a computer system.

Examples of the computer readable recording medium include read-onlymemory (ROM), random-access memory (RAM), CD-ROMs, magnetic tapes,floppy disks, and optical data storage. The computer readable recordingmedium may also be distributed over network coupled computer systems sothat the computer readable code is stored and executed in a distributedfashion. Also, functional programs, codes, and code segments foraccomplishing the inventive concept may be easily construed byprogrammers of ordinary skill in the art to which the inventive conceptpertains.

It should be understood that the exemplary embodiments described thereinshould be considered in a descriptive sense only and not for purposes oflimitation. Descriptions of features or aspects within each embodimentshould typically be considered as available for other similar featuresor aspects in other embodiments.

While various exemplary embodiments have been described with referenceto the figures, it will be understood by those of ordinary skill in theart that various changes in form and details may be made therein withoutdeparting from the spirit and scope of the inventive concept as definedby the following claims.

What is claimed is:
 1. A monitoring method comprising: receiving aplurality of images from a plurality of image devices; displaying theimages in a first region of a display; displaying information about theimage devices related to the images, which are being displayed in thefirst region, in a second region of the display which is different fromthe first region; and generating a plurality of log icons includingevent information when a predetermined event is detected from the imageswhich are being displayed in the first region; and displaying the logicons in a third region of the display which is different from the firstand second regions.
 2. The monitoring method of claim 1, wherein each ofthe log icons comprises a thumbnail image at a time when the eventoccurs, a type of the event, and text information about the event. 3.The monitoring method of claim 1, further comprising: displaying atleast one search tab, in which a search condition is set, near the thirdregion; and in response to selection of a search tab among the at leastone search tab, displaying at least one log icon corresponding to thesearch condition which is set in the selected search tab, wherein thedisplayed at least one log icon includes a thumbnail image andinformation about an event.
 4. The monitoring method of claim 1, furthercomprising: displaying a timeline in the display; and in response toselection of a time section from the timeline, displaying at least onelog icon corresponding to the selected time section, wherein thedisplayed log icon includes a thumbnail image and information aboutoccurrence of an event during the time section.
 5. The monitoring methodof claim 4, further comprising, in response to selection of a log icon,from among the at least one log icon, corresponding to the selected timesection, activating the selected log icon, and deactivating the rest ofthe at least one log icon, wherein the activated log icon includes athumbnail image and information about occurrence of an event.
 6. Themonitoring method of claim 4, further comprising, if a number of the atleast one log icon corresponding to the selected time section is morethan a maximum number of log icons that can be accommodated in the thirdregion, indicating a number of log icons that exceeds the maximumnumber.
 7. A monitoring method comprising: detecting occurrence of atleast one event from a plurality of images received from a plurality ofimage devices; generating, from the images, a thumbnail image and anevent image corresponding to a time of the occurrence of each of theevent; generating a log icon which includes the thumbnail image andevent information corresponding to each of the event; and displaying alog list including the log icon corresponding to each of the event in aregion of a display in real time.
 8. The monitoring method of claim 7,wherein the event information comprises a type of the event and textinformation about the event.
 9. The monitoring method of claim 7,further comprising, in response to selection of a log icon from among aplurality of log icons in the log list, activating an event imagematching a thumbnail image of the selected log icon, and deactivatingunselected log icons.
 10. The monitoring method of claim 7, furthercomprising: displaying a condition search tab in the display; inresponse to selection of the condition search tab, displaying a menuwhich includes at least one search condition to be selected; and inresponse to selection of one of the at least one search condition,displaying a log list including at least one log icon corresponding tothe selected search condition, wherein the at least one log iconincludes a thumbnail image and information about an event.
 11. Themonitoring method of claim 10, wherein the search condition comprises atleast one of a place of the event, a type of the event, and a pluralityof devices providing the plurality of images corresponding to respectiveevents.
 12. The monitoring method of claim 7, further comprising:displaying a timeline in the display; and in response to selection of atime section from the timeline, displaying at least one log iconcorresponding to the selected time section, wherein the at least one logicon includes a thumbnail image and information about an event.
 13. Themonitoring method of claim 12, further comprising, in response toselection of a log icon from among the at least one log iconcorresponding to the selected time section, activating an event imagematching a thumbnail image of the selected log icon about an event, anddeactivating the rest of the at least one log icon.
 14. The monitoringmethod of claim 12, further comprising, if a number of the at least onelog icon corresponding to the selected time section is more than amaximum number of log icons that can be displayed in the display,indicating a number of log icons that exceeds the maximum number in thedisplay.
 15. A monitoring system comprising: a controller configured todetect occurrence of at least one event from a plurality of images,generate, from the plurality of images, a thumbnail image and an eventimage at a time of the event occurrence, and generate a log icon whichincludes the thumbnail image and information about the event; and adisplay configured to display a log list including a plurality of logicons including the log icon in real time.
 16. The monitoring system ofclaim 15, wherein the event information comprises a type of the eventand text information about the event.
 17. The monitoring system of claim15, wherein in response to selection of a log icon from among theplurality of log icons, the controller activates an event image matchinga thumbnail image of the selected log icon and deactivates the rest ofthe log icons in the display, and wherein the selected log icon includesa thumbnail image and information about an event.
 18. The monitoringsystem of claim 15, wherein the display is configured to display acondition search tab, wherein, in response to selection of the conditionsearch tab, the controller controls the display to display a menu whichincludes at least one search condition to be selected, wherein, inresponse to selection of one of the at least one search condition, thecontroller controls the display to display a log list including at leastone log icon corresponding to the selected search condition, wherein theat least one log icon includes a thumbnail image and information aboutan event.
 19. The monitoring system of claim 15, wherein the displayunit is configured to display a timeline, wherein, in response toselection of a time section from the timeline, the controller controlsthe display to display at least one log icon corresponding to theselected time section, and wherein the at least one log icon includes athumbnail image and information about an event.
 20. The monitoringsystem of claim 19, wherein if a number of the at least one log iconcorresponding to the selected time section is more than a maximum numberof log icons that can be accommodated in the display, the control unitindicates a number of log icons that exceeds the maximum number in thedisplay.